Returns the app which was used for this request. Can also be an anonymous app if authorization is not required for the endpoint